Enhanced Cyber Risk Management Standards
On October 26, 2016, the Board of Governors of the Federal Reserve System (Board), the Office of the Comptroller of the Currency (OCC), and the Federal Deposit Insurance Corporation (FDIC) (collectively, the agencies) published in the Federal Register an advance notice of proposed rulemaking (ANPR) regarding enhanced cyber risk management standards (enhanced standards) for large and interconnected entities under their supervision and those entities' service providers. The ANPR addresses five categories of cyber standards: Cyber risk governance; cyber risk management; internal dependency management; external dependency management; and incident response, cyber resilience, and situational awareness. Due to the range and complexity of the issues addressed in the ANPR, the public comment period has been extended until February 17, 2017. This action will allow interested persons additional time to analyze the proposal and prepare their comments.
Total Loss-Absorbing Capacity, Long-Term Debt, and Clean Holding Company Requirements for Systemically Important U.S. Bank Holding Companies and Intermediate Holding Companies of Systemically Important Foreign Banking Organizations
The Board is adopting a final rule to require a U.S. top-tier bank holding company identified under the Board's rules as a global systemically important bank holding company (covered BHC) to maintain outstanding a minimum amount of loss-absorbing instruments, including a minimum amount of unsecured long-term debt. In addition, the final rule prescribes certain additional buffers, the breach of which would result in limitations on the capital distributions and discretionary bonus payments of a covered BHC. The final rule applies similar requirements to the top-tier U.S. intermediate holding company of a global systemically important foreign banking organization with $50 billion or more in U.S. non-branch assets (covered IHC). The final rule also imposes restrictions on other liabilities that a covered BHC or covered IHC may have outstanding in order to improve their resolvability and resiliency; these restrictions are referred to in the final rule as ``clean holding company requirements.''